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8»TBK MD MBZBOD TOR BBntZBTZHG, BBLECTUG AID 
VRZBTZVG VOflTMB ZVOZCZX CW OOCIMBBTS 

TECHNICAL FIELD OF THE IMVmTTQM 

This invention relates, in general, to printing 
postage indicia on nail. More specifically, the 
Invention relates to a system and method for creating 
5 postage indicia in conjunction with a word processing 
document and for displaying and/ or transferring the 
indicia on the front of an envelope. The system will 
calculate the postage due and personalize the postage 
indicia. 



SUBSTITUTE SHEET (RULE 26) 
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BAcyqpooWP Of THE INVEWTJCQW 

The use of word processors running on general 
purpose computers is so coannon place today as to be 
taken for granted. Children, as well as adults, use 
5 such word processing programs to create, format and 
print (in selected colors, fonts and size) every 
conceivable type of document. These systems are used to 
create all manner of designs and to print the creations 
on all manner of printable material in addition to 

10 paper. One example for the use of such processors that 
has become very popular is to use them for the creation 
of paper checks. This use is typically in conjunction 
with an accounting program which mimics a user's 
checkbook. Another use is the creation of T-shirt 

15 designs and the subsequent printing of such T-shirts 
(or other material) under control of the user. 

often, the document that is created by the user in 
the processor (for example, a letter or a check) is 
then mailed to same other location. This entails the 

20 placing of the doctiment (or other material) in a 

mailing container (envelope) , addressed, and supplied 
with sufficient postage. 

Many of the programs in use today print the 
mailing address (as taken from the document) on labels 

25 which are printed in conjunction with the creation of 
the document. These labels then are peeled off the 
document and transferred to the outside of the mailing 
envelope to save the user time and to avoid placing the 
envelope in the printer or otherwise addressing the 

30 envelope. 

However, using such system the user still must add 
postage to the mailing envelope manually or the user 
must run the mailing container (envelope) through a 
postal meter. At best, this is one additional step. 

35 At worst, in the case of a nonconforming mailing 
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container such as a carton, several additional steps 
are required. 

Furthermore, the customer is limited in the 
graphic configuration of the postage applied to the 
5 letter to those configurations printed and sold by the 
Post Office. Currently, the customer does not have the 
ability to create a customized postage indicia that . 
would correspond to the message on a particular 
document. 

10 Accordingly, there is a need in the art for a 

system and method that provides for the printing of an 
appropriate amount of authorized postage by the same 
general purpose processors that allow the customer to 
create documents. 

15 Thus, it is an object of the present invention to 

provide a means for the customer to enter the 
appropriate rate determining information such as the 
address to which the customized greeting card is being 
sent, what class of mail is being used, etc., and have 

20 the processing system that formats and prints a 

document to concurrently calculate the appropriate 
postage for the greeting card and print the appropriate 
postage for that document at' the same time the document 
is being printed. 
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SUMMARY OF THE INVENTION 

The present invention fulfills the needs discussed 
above by disclosing a method and a system whereby a 
customer may automatically calculate the correct amount 
5 of postage, print the correct amount of postage, 

personalize a selected stamp indicia, and print address 
labels at the same location where the customer 
generates a customized greeting card. 

In accordance with one aspect of the present 

10 invention, a general purpose computer based system is 
disclosed which operates in conjunction with a 
conventional word processing program, check creation 
program or with any other program that can format and 
control the printing of user controlled documents to 

15 allow the user to automatically calculate the correct 
amount of postage for that document and to print that 
postage at the same time the document is being printed. 

In one embodiment, the printed postage indicia is 
put in a corner of the document so that after the 

20 document is placed in an envelope, the postage will 
show through a glassine **window" created in the 
envelope. 

In another embodiment, the postage indicia is 
printed on a transfer sheet and physically transferred 
25 to the outside of the mailing envelope or package. 

The discussed system can also generate postage 
which includes a personalized postage indicia which may 
also contain an encrypted message, such as a PostNet 
Zip+4 bar code, as a function of mailing parameters 
30 entered into the system and particular to the 
associated document. 

One technical advantage of this invention is that 
a printer can create a document as well as the postage 
to mail that document during one pass across the blank 
35 writing medium. 
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A further advantage of this system is that the 
user can select a postage indicia from a menu of 
available graphic configurations to correspond with the 
type of document being generated and the system will 
5 print the postage as part of the document. 

Yet another advantage of this system is that the 
postage generated by the system will have a PostNet 
Zip+4 bar code printed on it which makes that piece of 
mail easier to sort, route and deliver. 

10 The foregoing has outlined rather broadly the 

features of the present invention in order that the 
detailed description of the invention that follows may 
be better understood. Additional features of the 
invention will be described hereinafter which forms the 

15 subject of the appended claims. It should be 

appreciated by those skilled in the art that the 
conception and the specific embodiments disclosed may 
be readily utilized as a basis for modifying or 
designing other structures for carrying out the same 

20 purposes of the present invention. It should also be 
realized by those skilled in the art that such 
equivalent constructions do not depart from the spirit 
and scope of the invention as set forth in the claims 
of the invention. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present 
invention, and the advantages thereof, reference is now 
made to the following descriptions taken in conjunction 
5 with the accompanying drawings, in which: 

FIGURE lA illustrates a processor-based system for 
implementation of the present invention; 

FIGURE IB illustrates several embodiments of the 
postage storage device; 
10 FIGURE 2 illustrates an embodiment of user 

instructions and screen prompts utilized by the present 
invention to interface with a user when installing the 
program on the processor-based system for 
implementation of the present invention; 
15 FIGURE 3 illustrates an embodiment of a user 

registration form; 

FIGURES 4A-4B illustrate a display screen utilized 
by the present invention to interface with a U.S. Post 
Office employee when replenishing postage within the 
20 present invention; 

FIGURE 5 illustrates a flow diagram of the 
replenishing process; 

FIGURE 6 illustrates a preferred embodiment of the 
security techniques utilized within the present 
25 invention; 

FIGURES 7A and B illustrate a flow diagram for 
controlling the removal of data from the memory of a 
postal storage device; 

FIGURE 8 illustrates how a postage button is 
30 encoded; 

FIGURE 9 illustrates a flow diagram of the 
operation of the present invention within a card 
generating system; 
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FIGURE 10 Illustrates one embodiment of a display 
interface provided to a customer for selecting a type 
of greeting card; 

FIGURE 11 illustrates one embodiment of a display 
5 interface provided to a customer for selecting a style 
of greeting card; 

FIGURES 12A and B illustrate one embodiment of a 
personalized greeting card; 

FIGURE 13 illustrates a display interface provided 
10 to a customer when accessing the present invention on a 
card generating system; 

FIGURE 14 illustrates one embodiment of a display 
interface provided to a customer for selecting a type 
of postage indicia; 
15 FIGURE 15A illustrates one embodiment of a display 

interface provided to a customer for selecting a 
specific postage indicia that can be personalized by 
the customer; 

FIGURE 15B illustrates a postage indicia that has 
20 been personalized; 

FIGURES 16A and B illustrate two embodiments of 
print formats of the information entered into the 
"E-STAMP" program; 

FIGURE 17 is a flow chart of system operation 
25 working in conjunction with another word processing 
program; 

FIGURE 18 is a view of a document having on it a 
transfer mechanism for moving the printed indicia from 
the document to the front of the envelope; 
30 FIGURE 19 shows a check with the postage indicia 

printed on the face of the check; and 

FIGURE 20 shows an envelope having a transfer 
mechanism for showing the postage to a viewer outside 
the envelope. 
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DEShlhW PESCRIPTIQW Qf THB ?;yvRiTj;o|i 

The present invention provides for a portable 
postage storage device, described in more detail below, 
that can be coupled to a general purpose 
5 processor-based system that interacts with a customer 
to generate a document, or other piece of mail. 

The present invention further provides for a 
method and system, described in co-pending U.S. 
application serial no. 08/263,751 and incorporated 

10 herein by reference, for automatically calculating the 
appropriate amount of postage for a piece of mail, 
printing that amount of postage and deducting the 
printed amount of postage from the total amount of 
postage stored within the portable postage storage 

15 device. In addition, the present invention allows the 
user to retrieve, select, personalize and print postage 
indicia • 

The present invention will allow an amount of 
authorized postage to be loaded into a portable postage 

20 storage device by the U.S. Post Office via a 

processor-based system hereinafter referred to as the 
"POSTAGEMAKER" program. Although reference is often 
made to the U.S. Post Office, the present invention may 
be implemented within any country and with respect to 

25 any postal system. 

The loaded postage may be accessed and a portion 
of that postage retrieved via a program stored on a 
processor-based system, such program hereinafter 
referred to as the "E-STAMP" program. The E-STAMP 

30 program may be stored on a processor-based system that 
also contains a document generating system. The 
document generating system may be used to generate 
customized mail, as for example personalized greeting 
cards . 
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A detailed discussion of the inventive concepts of 
this invention will now be made with respect to FIGURES 
17 through 20. A detailed discussion of the general 
system operation is contained in this disclosure 
5 hereinafter with respect to FIGURES lA through 16B. 
The user is referred to the subsequent discussion to 
gain an understanding of how the general purpose 
processor works in conjunction with the portable 
processor to control the dispensation and creation of 

10 postage indicia. 

Referring now to FIGURE 17 two embodiments of the 
invention are shown, one proceeding from check 
processing program 1701 and the other from word 
processing program 1702. It should be noted that these 

15 programs are well-known in the art and are typical of 
the may application types available for document 
preparation. For example, a typical well-known check 
processing program is available to the general public 
from Intuit Corporation and is licensed under the trade 

20 name **Quicken**. Available to every user with the 
''Quicken*' program is a manual of operation of the 
"Quicken" system, which is hereby incorporated by 
reference herein. 

Similarly, a typical well-known word processing 

25 program could be, for example, the "Word" system from 
Microsoft. Also included with each word processing 
program from Microsoft is a manual of operation giving 
extensive details of the operation of the "Word" system 
from a user's perspective. Such manual is hereby 

30 incorporated by reference herein. 

Decision box 1703 makes a determination of whether 
the automatic postage box is on. The automatic postage 
box, for example, would be a designation made by the 
user of either the check processing program or the word 

35 processing program contained within that system any 
information being commimicated to a decision point. 
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Obviously, if the answer is no, the program then 
would skip to the regular check processing program or 
word processing program or whatever other program is 
being run as shown in box 1704. 
5 If the answer is yes, then the user is queried in 

box 1705 as to whether he/she wishes to use a database 
of indicia that have already been created. 

If the answer is no, the program skips to box 
1709. If the answer is yes, then the program goes to 

10 box 1706 where the user is asked whether the user 
wishes to create his/her own indicia or whether the 
user wishes to modify indicia. 

If the user wishes to create his/her own indicia, 
then the user is referred to box 1707 where a drawing 

15 program is provided for the creation of the indicia. 
One such program can be the macromedia free-hand 
program which is available to the general public and 
which comes with an operating manual, which operating 
manual is hereby incorporated by reference herein. 

20 If the user, as shown in box 1706, simply wishes 

to modify an existing indicia, then the user is 
referred to box 1708 where the existing database is 
made available and the user selects the indicia of the 
user's choice and either uses it directly or modifies 

25 it. 

When such modification is finished, the user is 
then referred back to box 1709 and determination is 
made as to whether this is a draft. The reason for 
this is that if it is a draft, there is no need to 
30 print the. postage thereon. 

If it is a draft, then the program moves to box 
1710 and returns to the controlling word processor 
program where regular formatting and printing is 
controlled. 

35 However, in box 1709, if this is a final version, 

a determination is made via box 1711 as to whether this 
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is a check. If it is a check, then the amount of 
postage is calculated allowing for the envelope size 
and weight in box 1713. 

However, if this is a word processing program, the 
5 page count is obtained via box 1712 from the 

controlling word processor program in box 1702 so that 
the system can, based upon the number of pages, 
calculate the amount of postage that will be due and, 
as shown in box 1713, allowing for the envelope size 
10 and weight will determine the amount of postage to be 
printed. 

Box 1714 prints the postage indicia on a transfer 
media on the letter or prints it directly on the letter 
for situations where the postage is going to be used in 

15 a glassine-type envelope or otherwise transferred to a 
user without a peel-off label, as will be discussed. 

In FIGURE 19 there is shown a check 1900 with 
sender's address location 1903, payee's address box 
1902 and having a place 1901 for the printing of the 

20 postage. 

Location 1901 is where the postage indicia is 
printed. However, located at Location 1901 can be a 
label which is peeled off and which thereby allows the 
user to transfer the postage to the outside of an 

25 envelope, such as envelope 2000. Location 1901 also 

could be an ink type that when printed on establishes a 
special transfer facility such that when the check is 
placed in an envelope of the proper type, a like 
position, such as position 2001 of envelope 2000 shown 

30 in FIGURE 20 is in juxtaposition with Location 1901 
will react with the ink medium or other special 
transfer facility of 1901, thereby presenting to a 
viewer on the outside of the envelope, the postage 
indicia on the inside. 

35 In this manner a transfer occurs between postage 

printed on check 1900 and the outside of envelope 2000 
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without the need for removing and repastlng the label. 
This transfer could occur as a chemical reaction or 
otherwise under perhaps heat control as generated by a 
user's finger or by any other mechanism desired. Of 
5 course, box 2001 of FIGURE 20 can be a glassine window 
which allows a viewer to see the postage printed at 
position 1901 of check 1900*. 

FIGURE 18 shows a letter 1800 having a body of the 
letter in 1803 with a postage indicia label 1801 and an 

10 address label 1802, As just discussed, postage indicia 
label 1801 could be removed and positioned on the 
outside of an envelope or the indicia could be 
imprinted directly on the envelope and the envelope 
folded such that position 1801 of letter 1800 will show 

15 through window 2001 of envelope 2000 in FIGURE 20. 

Address label 1802 could be utilized in the same 
manner or the address label 1802 not printed at all and 
a viewer view the name through a glassine window such 
as window 2002 of envelope 2.000 in FIGURE 20. 

20 General Svstem Operation 

Referring to FIGURE lA, there is illustrated a 
processor-based system 10 utilized for implementing the 
present invention, specifically the aforementioned 
E-STAMP and POSTAGEMAKER programs. System 10 includes 

25 chassis 11 enclosing processor (^CPU**) 12 and disk 
drive 14. System 10 is a general purpose computer, 
such as an IBM compatible (or Apple Macintosh) 
controlled by any general purpose operating system such 
as DOS or UNIX. Coupled to CPU 12 is display 13, 

30 keyboard . 15 and mouse 16. 

Furthermore, system 10 is adapted for coupling 
with a postage storage device 18, such as the preferred 
embodiment touch memory utility ("TMU") button 182 
illustrated in FIGURE IB. Postage storage device 18 is 

35 coupled to the processor-based system 10 through a 
postage storage device receptor 17. 
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The postage storage device may be any nemozy 
device having some residual data capability, where that 
memory device can provide sufficient security measures 
to efficiently limit access to the memory of the device 
5 to authorized users. For example, since algorithms can 
be used to control access to the memory device, a 
standard ''diskette*' can be used if desired. 

The preferred embodiment, TMU button 182, 
incorporates a small disk having a memory. TMU 

10 . button 182 is a small, light-weight, portable, 

essentially non-breakable device available from Dallas 
Semiconductor, Dallas, Texas. A TMU button 182 may be 
coupled to processor-based system 10 through button 
holder 172. In a preferred embodiment of the present 

15 invention, a batch of TMU buttons will be manufactured 
with specifically designated serial numbers for use 
solely with the present invention. 

An advantage of the preferred embodiment (the TMU 
button 182) is that a TMU button 182 is small enough 

20 and light enough that several may be carried in one 

hand. Furthermore, the TMU button 182 is sufficiently 
durable to be hand-carried from one location to 
another. The fact that the portable memory is 
universally usable with any PC equipped with a button 

25 holder 172 allows the per unit cost of TMU buttons 182 
to be lower. 

Additional alternative embodiments of the postage 
storage device 18 are illustrated in FIGURE IB. One 
alternative postage storage device 18 is a smart disk 

30 188 incorporating its own electronic modules capable of 
read/write operations. One embodiment of such a smart 
disk 188, Smart Disk^, can be obtained from Smart Disk 
Security Corporation, Naples, Florida. The Smart Disk™ 
looks like a floppy disk and fits into a typical PC's 

35 floppy disk drive, connected either externally or 

internally to processor-based system 10; however. Smart 
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Disk™ has its own microprocessor that provides secure/ 
password protected storage. One advantage of the Smart 
Disk™ is that it can operate in a standard PC disk 
drive without modification to the disk drive or PC. 
5 Smart Disk™ provides security for stored postage with 
an encrypted password and the encryption algorithm. 

Another type of postage storage device 18 is a 
smart card 186, a plastic card embedded with a 
microchip. The microchip contains mathematical 

10 formulas that encrypt computer data to secure access to 
that data (i.e., postage) and verify a user's identity 
before allowing access to the data. One drawback in 
the currently available smart cards 186 is that they 
require a magnetic card processor 176 hooked to the 

15 processor-based system 10. 

Still another type of postage storage device 18 is 
a PCMCIA card 184. PCMCIA cards are currently used on 
notebook computers for modular storage and 
communication. Both external and internal add-on 

20 hardware 174 (i.e., card slots) are available for PCs. 

The portable memory can contain data fields with 
specific information, such as passwords, stored therein 
at particular locations. The portable memory could 
also contain, for example, a timer, a counter, a 

25 graphics program, a bar code program, or any one of a 
plurality of other "active" elements which can be 
incorporated into the operation of the system. 

Before an individual can become an authorized user 
of an E-STANP program, he/she must first acquire a copy 

30 of the program, register his/her copy of the program 
with Post N Nail, Inc. and execute a license agreement 
with Post N Mail, Inc. for the use of E-STAMP. There 
are at least two ways to acquire and register an 
E-STANP program. 

35 One way to acquire and register an E-STAMP program 

is for the individual to communicate directly with Post 
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N Mail, Inc. to obtain site licenses for whatever 
number of ESTAMP programs he desires to. use, the 
desired number of postal storage devices 18, and a 
registration card containing a Post N Mail (PNM) serial 
5 number for each postal storage device 18. 

Alternatively, an individual may acquire the 
E-STAMP program at any E-STAMP retail outlet. For 
example, an individual can buy a postage storage device 
18, containing a small quantity of postage, with a copy 
10 of the E-STAMP program. That individual will then 
install the E-STAMP program on a processor-based 
system 10. FIGURE 2 illustrates one embodiment of the 
instructions and screen prompts to be followed by the 
individual during the installation of the E-STAMP 
15 progr£un. The instructions and screen prompts 

illustrated in FIGURE 2 reflect the installation of the 
E-STAMP program in a "windows" operating environment on 
a PC equipped with a TMU button 182 and button holder 
172. Of course, other means could be employed for 
20 implementing the present invention within a 
processor-based system 10. 

The installation instructions 201 inform the 
individual, or user, how to pull up the E-STAMP 
installation program. Once the installation program is 
25 initiated, screen 203 will appear. Screen 203 

instructs the user to connect the TMU holder 172 to a 
serial port and to insert the TMU button 182 into the 
holder 172. The user is then instructed to turn on a 
printer 19 that has been coupled to the processor-based 
30 system 10 and check to see that the printer 19 is 

supplied with paper. Screen 203 further requests that 
the user prepare the following information: the user's 
full name and address, an identification number for the 
authorized user (i.e., an employer identification 
35 number (EIN#) , if the user is a business or 

organization; or a social* security number (SS#) , if the 
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user is an individual), the user's zip code, the user's 
telephone number and the user's fax number. The next 
screen, screen 205 displays the Post N Mail License 
Agreement with its legal terms and conditions « 
5 Acceptance of the terms and conditions set out in the. 
license agreement is indicated when the user continues 
with the installation program* 

Next, screen 207 will appear and display the 
E-STAMP serial number and THU serial number. At this 

10 time the user-specific information requested in 

screen 203 should be entered into the E-STAMP program. 
Once the user has entered the user-specific 
information, screen 209 will appear warning the user to 
carefully verify the correctness of the entered 

15 information. 

After verifying the information added into the 
E-STAMP program, screen 211 will remind the user to 
ensure that a coupled printer 19 is on line. The user 
information entered into the E-STAHP program will then 

20 be incorporated into a user registration form, one 
embodiment of which is illustrated in FIGURE 3. The 
E-STAMP registration form will be printed in 
triplicate. The user is instructed to sign and mail 
two copies of the registration form to the creator of 

25 the E-STAMP program. Post N Mail, Inc. and to retain 
one copy of the registration form. Screen 211 also 
informs the user that a registration card will be 
mailed to the user in order that the user may access 
TMU refilling stations. 

30 The E-STAMP installation program continues with 

screen 213, which describes the progress being made in 
installing the E-STAMP program, and screen 215, which 
informs the user when the E-STAMP program installation 
has been completed. 

35 Referring to FIGURE 3, there is illustrated a 

preferred embodiment of the E-STAMP registration form. 
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The registration form includes information such as the 
THU button serial number 31, the E- STAMP serial 
number 32, the date and time that the E-STAMP program 
was installed 33, and user-specific information 35 
5 (e.g., name, address, telephone and fax numbers, and 
identification number) , and a copy of the Post N Mail 
License Agreement 38 having an identified location for 
the user to sign. A preferred embodiment of the 
E-STAMP registration form will also contain all of the 

10 information needed to specifically identify the TMU 

button 182, E-STAMP program, and registered user in an 
encrypted format 37. The encrypted information 37 will 
be in a machine-readable graphical security interface 
such as a standard bar code. 

15 The standard bar code contains white and dark 

areas in the form of bars that can be read by a laser 
scanner. The laser scanner illuminates the white and 
dark areas with a light of a certain frequency. The 
light is reflected back to the laser scanner in such a 

20 way as to indicate the pattern of white and black areas 
within the bar code. Since white areas reflect much 
more light than dark areas do, a perpendicular scan of 
the bar code will allow the scanner to translate the 
reflected light into the coded information. More than 

25 20 linear bar code languages have been developed, each 
with its own specifications for how many bars and 
spaces make up a character, how characters are to be 
arranged, whether the characters can be letters as well 
as numbers, and so forth. The most widely-used bar 

30 code is the Universal Product Code (UPC) seen on 
everyday grocery items. The standard bar code 
currently used by the Post Office is POSTNET ZIP+4 
described in Postal Service Publication number 67. 

More sophisticated graphical security interfaces 

35 have been developed over the last decade, such as 

Intermec Corporations' Code 49 and Laser light System 
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Inc.'s Code 16K. A major advantage of these more 
sophisticated graphical security interfaces is that 
they contain an error-correction formula which can 
often recover the entire message even if parts of the 
5 code have been torn or damaged. 

A preferred embodiment of encrypted information 37 
is a graphical security interface developed by Symbol 
Technologies of Bohemia, New York and is called PDF417, 
a portable data file. PDF417 is a graphical security 

10 interface constructed from data units called ""words,** 
each of which is 17 modules long. Bars are made from 
filling in up to six consecutive modules and each unit 
has four separate bars and four spaces. In essence, 
PDF417 can stack the equivalent of up to 90 

15 one'-^dimensional bar codes, each just three hundredths 
of an inch high. Thus, the PDF417 symbology is more 
complicated to produce and scan than is the typical 
one-dimensional bar code and allows for a denser coding 
of information. Because the PDF417 symbology 

20 specification includes sophisticated protocols for 

error-correction, the actual density of information is 
highly variable, but can be ten times the amount of 
information found in U.S.P.s. PostNet bar code, per 
square inch. PDF417 is available from Symbol 

25 Technologies, Inc., 116 Wilbur Place, Bohemia, N.Y. 
11716 and the operation of the PDF417 is detailed in 
PDF Primer obtained from Symbol Technologies, Inc. and 
is hereby incorporated herein by reference. 

When Post N Mail, Inc. receives the signed Post N 

30 Mail License Agreement from the user, the encrypted 
information 37 can be scanned with a laser scanner so 
that the information contained therein can be 
automatically transferred to a registered user's 
database. When the encrypted information 37 has been 

35 transferred to the registered user's database, a 

registration card containing a Post N Mail (PNM) serial 
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nuBiber will be printed and mailed to the registered 
user. 

Once the user has obtained a registration card for 
each postal storage device 18, or TMU button 182, 
5 acquired, the user may then take that registration card 
with the user's TMU button 182, or other postage 
storage device 18, to the Post Office to be registered 
with the Post Office. 

Until the TMU button 182 has been registered with 
10 the Post Office, the POSTAGEMAKER program will not 

recognize TMU button 182 as being an authorized postage 
storage device 18. Particular Post Office sites will 
have the POSTAGEMAKER program installed in a 
processor-based system • The POSTAGEMAKER program will 

15 allow a postal worker to interface the postage storage 
device 18 with the processor-based system residing at 
the Post Office in order to replenish the amount of 
postage programmed within the postage storage device 18 
in an amount requested and purchased by the user. 

20 To register a TMU button 182, or other postage 

storage device 18, with the Post Office a postal worker 
must enter the information on the PNM registration card 
into the POSTAGEMAKER program* Such information will 
include the PNM serial niimber, EIN# number or SS#, TMU 

25 button serial number, and the address and telephone 
number of the registered user. Once all of this 
information has been entered into the system, the 
POSTAGEMAKER program will then recognize TMU button 182 
and allow a postal worker to replenish the amount of 

30 postage stored within button 182 at the request of the 
user in a manner to be discussed below. 

Alternatively, a pair of systems 10 may be linked 
together through Public Switched Network ("PSN") 102 
via modem 101 or directly through digital 

35 telecoxtanunications trunks (not shown) . Processor based 
systems 10 located at different U.S. Post Offices may 
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be linked via PSN 102 in a conventional well known 
manner (such as through modem 101) so that information 
may be shared between the various Post Offices. 
Generally, a copy of the POSTAGEMAKER program will be 
5 stored within at least one . processor-based system at 
selected U.S. Post Office locations. PSN linkage of 
processor-based systems 10 by the Post Office and the 
user will allow the sharing of information between the 
various Post Offices and will allow a user to call a 
10 number (an authorized Post Office number) and have the 
Post Office transfer the required amount of postage to 
a postage storage device 18 installed at a user site by 
modem. 

Referring to FIGURE 4A, there is illustrated a 

15 preferred embodiment of a display screen shown on 
display 13 to a U.S. Post Office employee when 
accessing the present invention on system 10. Of 
course, the particular display aspects illustrated in 
FIGURE 4A may be modified in any one of numerous ways. 

20 Also, in a preferred embodiment of the present 

invention, processor-based system 10 will provide for 
input from a user via keyboard 15 and mouse 16 • 
However, other various forms of input available to 
processor-based systems may be utilized, such as a 

25 light pen or a touch-sensitive screen (both not shown) . 

At the upper right-hand corner of display screen 
40, there is indicated an POSTAGEMAKER serial number, 
in this example •77014-9998-44." This serial ntunber 
may include the zip code of the Post Office location, 

30 or may be selected at random. This serial number may 
also include a designation of a particular system 10 or 
a designation of the postal employee performing the 
transaction. 

In the upper left-hand corner of display screen 40 
35 is illustrated a TMU serial number, in this example "2 
128 176 32 0 0 0 175." This serial number represents 
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eight bytes of information stored within TMU button 
182, each byte nay represent any ntimber from 0 to 255. 
A TMU serial number is specifically assigned to and 
will identify a specific TMU button 182. Thus, display 
5 screen 40 indicates that the postal employee has 

coupled an authorized TMU button 182 to a processor- 
based system 10 which incorporates the POSTAGEHAKER 
program. 

Typically, the first two numerals (bytes) within 

10 the TMU serial number are assigned by the button (or 
memory) manufacturer. The third byte is selected by 
the U.S. Postal System and identifies TMU buttons 182 
specifically designed for the POSTAGEMAKER program, 
excluding other TMU buttons 182 not designed for the 

15 POSTAGEMAKER program, such as disposable buttons, and 
assisting in the exclusion of any other means for 
accessing the POSTAGEMAKER program* As a result, the 
present invention may be designed so that only 
authorized TMU buttons 182 may access the POSTAGEMAKER 

20 program for replenishment of postage as will be 
discussed below. 

The remainder of the TMU serial number is 
basically the sequential serial number of that 
particular TMU button 182 in particular. 

25 As the POSTAGEMAKER program reads the information 

stored within TMU button 182, the TMU serial number and 
the information in blocks 401 and 402 are displayed on 
display 13. The "TMU Verification* information in 
block 401 shows the date and Post Office location where 

30 the last addition of postage was electronically stored 
within button 182. As shown within box 401 of 
FIGURE 4A, coupled TMU button 182 currently contains a 
postage balance of $6.72, which is most likely a 
portion of the postage that was input into button 182 

35 at 3:18 p.m. on October 30, 1993, at the Post Office 
having an ID number of " 77090-2765-*65." It may be 
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observed that this serial nxmber is different from the 
POSTAGENAKER serial number shown at the upper right- 
hand comer of display screen 40, indicating that these 
numbers represent two different Post Office locations, 
5 and that button 182 was formerly coupled to a 
processor-based system 10 at Post Office "77090- 
2765-65** but is currently coupled to a processor-based 
system 10 residing at Post Office **77014-9998-44**. 
Box 401 also shows the expiration date of 

10 button 182, the user's PNM registration number, the 
user's E-STAMP serial number, and a strike and dollar 
counter check as will be described in more detail 
below. Box 402 is also displayed on screen 10 and 
itemizes the quantity of postage of designated values 

15 that has been used and subtracted from the postage 
stored in button 182. For example, box 401 of 
FIGURE 4A shows that $500.00 worth of postage was 
initially added to button 182 and that $6.72 worth of 
postage remains in button 182. This means that $493.28 

20 worth of postage has been deducted from button 182. 
Box 402 of FIGURE 4A shows that postage valued from 
$•01 to $.29 was subtracted from the amount of stored 
postage 991 times, that postage valued from $.30-$ .40 
was subtracted 166 times, that postage valued from 

25 $.41-$ .45 was subtracted 122 times, that postage valued 
at $1.00-$1.99 was subtracted 14 times and that postage 
valued at more than $3.00 was subtracted 16 times. 

In a manner to be discussed in detail below with 
respect to FIGURE 5, the first password (i.e., 

30 BCLINTOH) is entered into the POSTAGENAKER software. 
That password will be used to generate other passwords 
as described below and checked against the information 
stored in button 182. If the Post Office requests it, 
an extra password can be included to access and start 

35 the POSTAGENAKER program. When the correct password 
for button 182 is entered into POSTAGENAKER (i.e.. 
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BClinton) , a string of numerals are generated as shown 
in block 404. In a preferred embodiment of the present 
invention, the first several numerals within block 404 
represent the current time and date* A second string 
5 of numerals represent the POSTAGEMAKER serial number 
and the Post Office identification number. The 
remainder of the 45 bytes are generated randomly by the 
POSTAGEMAKER program. This generation of random 
numbers is detailed below. 

10 Thereafter, a second password is generated from 

the numbers within block 404 through the application of 
an algorithm, an example of a second password is 
illustrated in block 405. These numbers are used as a 
second password to assist in the random generation of 

15 numerals within block 406. 

In a preferred embodiment of the present 
invention, fourteen of the 45 bytes or numerals within 
block 406 represent a button usage analysis (i.e., how 
much of what value of postage has been used) ; three 

20 niunerals (bytes) represent the number of strikes (or 
uses) that have been made and subtracted from a 
starting point of 2,500,000; and four numerals (bytes) 
represent the dollar value of postage used and 
subtracted from a starting point of $2,500,000. The 

25 remainder of the numerals are generated randomly by the 
POSTAGEMAKER program. 

Thereafter, another algorithm utilizes the 
numerals generated within block 406 to derive the third 
password displayed within block 407. If all is 

30 correct, the cursor will then stop within block 408 so 
that the postal employee may enter a desired amount of 
postage in U.S. dollars as reguested by the user owning 
TMU button 182 currently coupled to the POSTAGEMAKER 
program. In a preferred embodiment of the present 

35 invention, four bytes represent the amount of postage 
entered by the postal worker, ten bytes represent 
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user-specific information, five bytes represent the 
user's zip code, three bytes represent the original 
postage amount, three bytes represent the number of 
strikes (or times that the postal storage device has 
5 been accessed) , four bytes represent the accumulated 
value of postage taken from the postage storage device, 
and three bytes represent the expiration date of button 
182. Button 182 may be programmed to expire at any 
time desired by the Post Office. The Post Office may 

10 desire that postage storage devices 18 expire every six 
months in order to maintain a valid registration with 
updated information. 

None of the numbers described above, or the 
passwords generated therefrom, are displayed on the 

15 screen. However, POSTAGEMAKER utilizes information 

from button 182 to generate numerals in blocks 406 and 
408 to generate the usage analysis log illustrated in 
block 402 and to perform a counters check illustrated 
in block 401. The counters check adds the number of 

20 strikes subtracted from 2,500,000 (see block 406; 
descending strike counter) to the number of strikes 
made (see block 408; ascending strike counter). If 
these numbers are accurate, their sum should equal 
2,500,000. A similar dollar counter check is also 

25 performed. The TMU button 182 is initialized to 

recognize 2,500,000 strikes and $2,500,000 worth of 
postage. Whenever a user has used 2,500,000 strikes or 
used $2,500,000 worth of postage, the postage storage 
device must be returned to the Post Office, or 

30 exchanged. for a new one. 

As shown in block 408, the user has desired to add 
$500.00 worth of postage to TMU button 182. This 
amount has been entered by the employee. Subsequent to 
entering the $500.00 amount, the postal employee will 

35 press button 409 to initialize the system* Once the 
appropriate amount of postage has been selected, the 
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postal employee nay press button 410 to ''write'* the 
$500 .00 amount into TMU button 182 coupled to system 
10. 

Alternatively^ a user may maintain an account with 
5 the Post Office or a credit card account which will be 
automatically charged for postal charges printed using 
TMU button 182. In this situation, the Post Office may 
require a retainer based on anticipated charges and 
then the Post Office will not enter a set monetary 

10 value into TMU button 182, but rather an authorization 
to debit a particular account and/ or a time limitation 
will be entered into TMU button 182. For example for a 
TMU button 182 that is to be used for commercial 
purposes, such as in the present invention, the Post 

15 Office may set a month limitation on the button. When 
the user returns the button to the Post Office at the 
end of the month, the Post Office will access the 
memory of the TMU button 182 to determine how much 
postage has been charged for that month and will bill 

20 the user for those charges • Furthermore, if the user 
has a number of postal storage devices 18 the Post 
Office can access its records to determine if the user 
is behind in payments to any of his accounts by 
searching for accounts using the user's identification 

25 number. If the user has overdrawn his retainer or is 
late in the payment of his accounts, the Post Office 
can refuse to replenish TMU button 182. 

After the postal employee has pressed button 410 
to "write" an amount of postage into TMU button 182, 

30 display screen 42, illustrated in FIGURE 4B, appears on 
the screen • Display screen 42 is similar to display 
screen 40 except for the new information within block 
411 which now shows that TMU button 182 contains 
$506.72 worth of postage, which was updated at 10:45 

35 a.m. on December 15, 1993 by the POSTAGENAKER program 
located at Post Office location "77014-9998-44." Note 
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that in this embodiment the postage original (block 
411) and usage analysis log (block 412) are re-zeroed 
whenever new postage is added to TMU button 182. 

Referring next to FIGURE 5^ there is illustrated a 
5 flow diagram of the aforementioned method of providing 
security within the present invention. First, in block 
510, the TMU serial number is accessed by the security 
program within the present invention. If the TMU 
serial number is not one specifically assigned to the 

10 U*S. Postal Service, the process will not proceed to 
step 520. In step 520, the program will write a 
password provided by the creator of the program. 
Thereafter, at step 530, the aforementioned data is 
produced and displayed within block 404. The random 

15 numerals will be produced as a function of the entered 
password. 

Thereafter, in step 540, a first algorithm 
selected by the U.S. Postal Service will operate on the 
data within block 404 to produce a second password 

20 (step 550) . This second password, displayed within 

block 405, is used within step 560 to generate a second 
set of data (the numerals displayed within block 406) . 
A second algorithm within step 570, utilizes the second 
set of data to produce a third password (step 580) . 

25 Once the above is written on the TMU button 182, the 
Post Office employee will be able to store postage to 
TMU button 182 by adding the desired amount within 
block 408 (step 590). Thereafter at step 505, write 
button 410 is 'depressed" to thereby store postage 

30 within qCMU button 182. 

Referring next to FIGURE 6, there is illustrated 
the algorithm used within the present invention, and 
described with respect to FIGURE 5. Note that the TMU 
serial number may be incorporated into the algorithm (s) 

35 to make each TMU button unique. For a given 8-*byte 
password, "pi" represents the first byte of that 
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password. For a given 4S-byte data area, "dl" 
represents the first byte of that data. The "mod 
operator" stands for the modulus, or remainder, of a 
division. 

Once the required amount of postage has been 
transferred to the TMO button 182, the user may then 
physically carry the button to the desired location of 
use and couple TMU button 182 to a processor-based 
system 10 through button holder 172. 

Once the user has registered his E-STANP program 
with Post N Mail and his postal storage device 18 with 
the Post Office, he may then load the E-STANP program 
into a processor-based system 10, if he has not already 
done so. In a preferred embodiment of the present 
invention, the E-STAMP program is loaded into a 
processor-based system controlled by a set of 
instructions from a document generating program, 
preferably an application program programmed to 
interact with a customer to generate a personalized 
greeting card, or other piece of mail. 

An interface program is used to integrate the 
E-STAMP program with the personalized card generating 
program. The two application programs will be 
coordinated. For example, graphic configurations of 
postage indicia that correspond to the type of cards 
and messages generated by the card generating program 
will be created and imported into the E-STAMP program. 
In addition, routines may be added to the E-STAMP 
program that will automatically convert information 
entered as the addressee's address into a PostNet Zip+4 
bar code and/or automatically encode some of the 
entered data regarding the postal storage device, the 
designation of the letter, etc. into a graphical 
security interface to be printed on a label or an 
envelope. Furthermore, the E-STAMP program will be 



wo 97/14117 PCTAJS96/16366 

28 

programmed to format all of the entered information to 

be printed in the desired format. 

In a preferred embodiment of the present 

invention, the user may want to removably couple two or 
5 more postal storage devices 18 to the processor-based 

system controlled by the set of instructions from the 

card generating and E-STAMP application programs, 

hereinafter referred to as the card generating system. 

Then if one of the postal storage devices becomes 
10 depleted of postage or is not replaced before its time 

limitation runs out, then the backup device may be used 

so that the system will continue to operate. 

Yet before the E-STAMP program can operate with 

the card generating system, an authorized postal 
15 storage device must be coupled to the system and 

validated by the E-STAMP program. A preferred 

embodiment uses TMU button 182 coupled to the processor 

based system through a button holder 172. 

Referring next to FIGURES 7A and 7B, the user 
20 validation procedure for a postage button coupled to 

the card generating system begins at Step 700 with the 

initiation of the user^s software program. At Step 

701, the software reads the unique serial number of the 

button and verifies that that serial number falls 
25 within a range assigned by the button manufacturer to 

the Post Office; if it does not, an error occurs and 

processing halts at Step 702. 

THU button 182 includes several memory sections, 

each section includes an ID area, a password area and a 
30 data are^t. Access to a given data area is controlled 

by a password written into the corresponding password 

area. 

When the user's software queries a postage button 
(portable memory) at step 703, a code indicating that 
35 the postage button 182 is a button for the retrieval of 
postage by a customer (PST) should be returned from the 
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postage button's first password area 800 (FIGURE 8) , 
otherwise an error occurs at step 704. Next, at step 
705 the user's software transmits to the button a 
password generated by applying a first hash algorithm 
5 to the numerical sequence of the TMU serial number for 
the given button 182 • If the password generated by the 
user's software matches that stored in first password 
area 801, access to first data area 802 (FIGURE 8) is 
allowed and processing continues at step 707; otherwise 
10 a string of invalid data is received from the button as 
described above. 

At step 707, the user's software reads the button 
type field in first data area 802. If the button 
returns the postage button code previously known by the 
15 software loaded on the card generating system, then 
processing continues; otherwise, an error occurs at 
step 708 and processing halts* Assuming the correct 
button code is read at step 707, at step 709 the user's 
software reads the second password area 803 using a 
20 second hash algorithm, an example of which is shown in 
FIGURES 4A and 4B. Specifically, the user's software 
takes the string of random data acquired by gaining 
access to a first data area 802 and applies the second 
hash algorithm thereto. The resulting password is then 
25 transmitted to the button, and if a match occurs with 
the password in second password area 803, access is 
gained to second data area 804; otherwise a string of 
invalid data is received from the button. If access to 
second data area 804 is gained at step 709, then at 
30 step 710 the user's software reads the last access date 
field of second data, area 804. If the last access 
date written into this field is before the current date 
processing continues, otherwise an error occurs at step 
711. 

35 Next, at step 712 the user's software attempts to 

gain access to third data area 806 (FIGURE 8) of the 
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postage button coupled to the card generating system. 
In this instance, the user's software then takes 11 
bytes of random data from first data area 802 and 5 
bytes of random data from second data area 804 and 
5 applies the third hash algorithm thereto. The 

resulting password is transmitted to the button and if 
a match occurs with the password held in third password 
area 805, access is gained to third data area 806; 
otherwise a string of invalid data is received from the 
10 button. 

Assuming access to third data area 806 (FIGURE 
8) is gained at step 712, at step 713 the user's 
software reads the balance available field of third 
data area 806 and the refill balance field of first 
15 data area 804. If the balance available is less than 
or equal to the refill balance then processing 
* continues, otherwise a corrupted button is detected at 
step 714. 

For an uncorrupted button, the user zip code 

20 written into the user zip code field of third data area 
806 is read and compared at step 715 with the user zip 
code assigned to the user's software stored in the card 
generating system* If they match, processing 
continues; otherwise, an error occurs at step 716 since 

25 a postage button cannot be used outside the zip code 
assigned to the corresponding customer software. This 
feature is (like all security levels in the system) 
optional, and can be modified to include several zip 
codes, if desired. 

30 At step 717, the customer software reads the value 

in the amount up-counter of third data area 806 and 
compares it with a corresponding amount value totalled 
and stored by the user's software. The amount up- and 
down-counters in each button are never cleared during 

35 the life of the button. Thus, if the amount in the 
button amount up-counter is greater than or equal to 
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the amount in the user's software file, the button 
passes at step 717; otherwise, an error occurs at step 
718. A similar test is performed at step 719 where 
the user's software reads the value in the strike 
5 up-counter and compares it with a corresponding strike 
tally kept by the user's software. Again, since the 
strike counters are never cleared, the value in the 
strike counter must be greater than or equal to the 
total in the software file, otherwise at step 720 an 
10 error occurs. 

At step 721, the value in the strike up-counter of 
third data area 806 is added to the value in the strike 
down counter of second data area 804. Since the strike 
down-coiinter always decrements from a predetermined 
15 initial value by one with the printing of each indicia 
and the strike up-counter always increments by one from 
an initial value simultaneously, their total must 
always equal the same value N. Thus, if at step 722 
the sum of the values in the strike up- and 
20 down-counters equals predetermined value N, processing 
continues; otherwise, the button is determined to be 
corrupted at step 723. 

Next, at step 724 the value in the amount 
down-counter of second data area 804 and the value in 
25 the amount up-counter in third data area 806 are 
summed. Since the value in the amount up-counter 
increments by the amount of the postage used with the 
printing of each indicia from an initial value and the 
amount down-counter simultaneously decrements from an 
30 initial value by the same amount, the sum of their 
values must always equal the value Z. Thus, at step 
725, if the total of the amount counter data read from 
the button equals value Z, then processing continues; 
otherwise, an error occurs at step 726 and processing 
35 is halted. 
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At step 729, the customer software reads the last 
access date written into the corresponding field in 
second data area 804. If the recorded last access date 
is the same as or before the present date the button 
5 passes, otherwise an error occurs at step 730. This 
prevents the entering of random data into the portable 
memory. 

At step 731, the expiration date written into the 
expiration date field of third data area 806 is read to 

10 determine if the button has expired. If the current 

date is before the expiration date, the button is still 
valid; otherwise, at step 732 the button is determined 
to be expired* 

At step 733 a check is made of the update flags, 

15 or the refilling operations that the postage button 182 
has undergone. The update flag in second data area 804 
must be equal to the update flag in third data area 
806; otherwise, an error has occurred during the update 
sequence and processing stops at 734. 

20 If the postage button 182 coupled to the user's 

system 10, or the card generating system, passes the 
last test at step 733, the button is validated at step 
735 and the customer can now print postage indicia up 
to the refill balance available or until the 

25 termination date of the postage button 182. 

Referring next to FIGURE 9, there is illustrated a 
flow diagram of the process employed by the card 
generating system that has an E-STAHP program 
incorporated therein. 

30 At step 901, the card generating system is 

activated by a customer by touching the screen, or in 
some other known manner. In a preferred embodiment, 
the card generating and E-STAMP programs will provide 
for input from a user via a touch-sensitive screen (not 

35 shown) ; however, other forms of input available to 
processor based systems may be utilized, such as a 
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light pen (not shown), a keyboard 15, or a mouse 16. 
At step 902, a screen appears to the customer listing 
the types of cards that the card generating system is 
programmed to produce such as birthday, anniversary, 
5 holiday, wedding, etc. An example of such a screen is 
seen in FIGURE 10. However, this screen, as with all 
the screens described below, may appear in a wide 
variety of formats with numerous different options 
available. 

10 Next, at step 903, the customer will be provided 

with a menu of styles for the type of card that he has 
selected. A sample screen providing optional styles 
for a birthday card is illustrated in FIGURE 11. The 
customer may choose a funny card, a traditional card, a 

15 belated card, or a card for a relative- Once the 

customer selects the style of card that he wants, the 
card generating system will provide one or more sample 
cards of that style for the customer to choose from 
(step 904) . 

20 When the customer has decided on a specific card, 

the customer can then create his/her own message to 
correspond to the card selected, or he/she can 
personalize the message that is provided (step 905) • 
For example, FIGURES 12 A and 12B show an example of a 

25 personalized birthday card. In the example shown in 

FIGURES 12A and 12B, the card generating system allowed 
the customer to enter the name of the person to receive 
the card in box 1204 and box 1208, birthday the 
recipient was celebrating in box 1202 and box 1206, and 

30 personal message in box 1210. 

In step 906, once the card has been finalized a 
prompt will appear asking the customer if he/she wishes 
to continue to print an addressed envelope. If the 
answer is "no," the card generating system will go to 

35 step 907 and produce a freshly printed greeting card 
containing the customer's personalized message and 
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terminate the program. However, if the customer 
indicates that he/she wishes to continue the program, 
then a display similar to that illustrated in FIGURE 13 
will appear on the screen. 
5 Next, at step 908, the customer is prompted to 

manually input his/her retiurn address in box 1303. If 
a return address is not desired, it may be omitted. 
Thereafter, in step 909, the contents of address box 
1305 are entered in a manner similar to the contents of 

10 return address 1303. 

Next, at step 910, the card generating system will 
automatically generate the appropriate PostNet bar code 
from the addressee^ s zip code. The printed address 
will have the PostNet Zip + 4 bar code, as described in 

15 Postage Service Publication 67, printed either above or 
below the addressee's address. The Post Office 
encourages the use of PostNet bar codes, as it allows 
mail to be automatically sorted for distribution. In 
fact, the Post Office charges less postage for mail 

20 that has the appropriate PostNet bar code imprinted 
thereon. 

The customer may then select the format that the 
addresses will be printed in by the use of box 1304. 
The return address and addressee's address may be 

25 printed on labels or on an envelope through printer 19. 
Thereafter, in step 912 the customer has the 
option to continue the program and have the appropriate 
postage for the card calculated and printed. If the 
customer declines to continue, then the card greeting 

30 system will terminate its interaction with the customer 
at step 913 and print the addresses on labels or an 
envelope, whichever was selected by the customer at 
step 911. 

If, at step 912, the customer decides to continue 
35 to calculate and print the postage, a new screen 140 
may appear, such as seen in FIGURE 14, giving the 
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customer a selection menu for the type of indicia that 
the customer desires to create (step 914). Once the 
customer selects a type of indicia, a new screen such 
as seen in FIGURE ISA will appear with at least one 
5 sample indicia for the customer's selection (step 915) • 
Alternatively, the E-STAMP program may automatically 
select sample indicia such as that seen in FIGURE 15A 
that corresponds to the type of card the customer has 
generated based upon information contained in the CPU 

10 memory (Step 916A) • The indicia may be stored in a 
data base within the CPU or could be downloaded via 
modem on a time-*by->time basis. 

Once the customer has selected the desired indicia 
he/she may personalize the indicia (Step 916B) with 

15 information such as the name of the person whose 
birthday it is (box 1504) and which birthday that 
person is celebrating (boxes 1504 and 1506) • For 
example, if the customer selected stamp indicia 1508, 
the card generating system wpuld prompt the user to add 

20 a number representing which birthday the recipient was 
celebrating in box 1506. FIGURE 15B illustrates how 
stamp indicia 1508 would appear after it has been 
personalized. Of course, for business letters there 
would be a data base (not shown) containing indicia 

25 pictures and wording appropriate for various 

situations, including slogans relating to the company 
using the system. 

Thereafter, in step 917, the customer will 
indicate whether the card will be mailed by itself, or 

30 with enclosures by selecting the appropriate option in 
box 1310. If no enclosures are included, then the 
system will calculate the appropriate postage based on 
the weight of the card, i.e. less than one ounce. If 
enclosures are to be sent with the greeting card, the 

35 customer must enter the weight of the enclosures. This 
weight may be entered manually, or automatically 
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through the use of scale 103 coupled to processor-based 
system 10, the card generating system, in a manner well 
known in the art. The weight of the card enclosures 
will be used to calculate the appropriate postage for 
5 the card. 

In step 918, the customer selects the class of 
mail from the choices shown in box 1309. 

Next, at step 919, the customer may select a U.S. 
postal zone or alternatively elect that the card is to 

10 be sent to Canada, Mexico or some other international 
designation as depicted in box 1308. Customer 
selection of the international designation in box 1308 
will result in a drop down menu to allow the user to 
enter the country of designation and allow the E-STAMP 

15 program to automatically calculate the necessary 
postage. 

The E-STAMP program will automatically incorporate 
the aforementioned entered parameters — weight, class, 
zone — in order to correctly calculate the correct 

20 postage to print in conjunction with the meter stamp. 

In step 920, the customer is provided with box 
1302 to insert the location from which the mail is to 
be sent. If no location is entered, the location of 
the card generating system will be entered into 

25 box 1302. The location entered into box 1302 may be 
utilized by the E-STAMP program to calculate the 
correct postage. 

At step 921, the customer may choose to have the 
date that the mail is stamped automatically entered by 

30 the E-STAMP program, or the customer may choose to 

enter the date that the customer desires to show on the 
card. The customer's; choice is registered in box 1312. 

At step 922, the E-STAMP program may optionally be 
programmed to incorporate preselected information, 

35 entered into the E-STAMP program, into an encrypted 
message that is machine readable. Any number of 



wo 97/14117 PCT/DS96/16366 

37 

graphical security interfaces, such as Symbol's 
Portable Data File Code (the PDF417 symbology) as 
described above, may be used to encrypt the 
information. An encrypted message may include any 
5 combination of the following information: the day, the 
date, the postage storage device serial number, the 
E-STANP serial number, the sender's zip code, the 
addressee's zip code, the expiration date of the 
postage storage device, the cumulative values of the 

10 strike and dollar counters, PNM registration ntimber, 
the user's identification number, and the Post Office 
identification number. 

This encrypted information may be printed 
separately from the postage indicia or the selected 

15 information may be incorporated within the meter stamp 
using a graphical security interface. A preferred 
embodiment, illustrated in FIGURES 16A and B, will 
print the postage indicia separately from the encrypted 
message and other information (printed in a visually 

20 recognized form) such as the amount of postage 

Imprinted on the card, the date, etc. By applying the 
encrypted information onto the envelope, the Post 
Office can scan the encrypted information to verify 
that an item of mail has been posted with authorized 

25 postage and to track the use of postage storage devices 
18. 

In step 923, the E-STAMP program utilizes the 
input/ output ports of the card generating system to 
send to printer/ label maker 19, the correct data 

30 pertaining to the meter stamp, the postage indicia, the 
encrypted message^ the authorized amount of postage, 
the return address, the addressee's address, etc. to be 
printed on an envelope, as illustrated in FIGURE 16B, 
or on detachable labels attached to the back of the 

35 greeting card as illustrated in FIGURE 16A. The 
detached labels can be removed and attached to the 
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front of an envelope. Three labels (i.e., return 
address 1602, addressee's address 1606 and postage 
indicia 1604), would be printed on a clear film that 
had been **kiss cut** 1608 to allow each label to be 
5 peeled from the uncut backing. 

The amount of postage printed on the meter stamp 
is automatically debited from the user's account or 
deducted from the amount stored within TMU button 182. 
Information stored in TMU button 182 memory is also 

10 automatically updated including the usage record for 

this particular serial number of TMU button 182 and any 
other information that requires updating. 

The aforementioned steps may be repeated for 
subsequent transactions of the card generating system 

15 until the TMU button 182 reaches the time limitation 
embedded in its memory, or has reached the end of its 
stored amount of postage. If two TMU buttons are 
coupled to the card generating system, then if one 
button becomes inoperable, the other button can be 

20 automatically accessed by the card generating system. 
Typically, the user will check on and/or replace the 
TMU buttons 182 coupled to the card generating system 
on a monthly, or other time related, basis. 

The aforementioned word processing check 

25 formatting, E-STAHP and POSTAGENAKER programs have been 
shown and described with respect to a ** windows** 
operating environment on a general purpose processor- 
based system 10. Of course, other means could be 
employed for implementing the present invention within 

30 a processor-based system. 

Although the present invention and its advantages 
have been described in detail, it should be understood 
that various changes, substitutions and alterations can 
be made herein without departing from the spirit and 

35 scope of the invention as defined by the appended 
claims. 
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W)HAT C^ATMEP JCS: 

1. A processor based word processing system 
having a program running on said processor, said 
program operable for controlling document creation by a 
user giving input data and instructions to said 

5 processor, comprising: 

means controlled by said word processing system 
and responsive to input data from a user for creating a 
document, said document having a section thereof 
containing the address of a document recipient; 
10 means for establishing a transfer section on said 

document ; and 

means for printing within said transfer section 
postage indicia pertaining to said document recipient. 

2. The system as set forth in claim 1 wherein 
said document is a check form and wherein said document 
creation control program is an accounting program 
operable to print amounts on said check form; and 

5 wherein said transfer section of said document 

contains a transfer medium. 

3. The system as set forth in claim 2 wherein 
the transfer medium is a peel off restick label. 

4. The system as set forth in claim 1 wherein 
said document creation control program is a word 
processing program, and wherein said transfer section 
of said document contains a transfer medium. 

5. The system as set forth in claim 4 wherein 
said transfer medium is a peel off restick label. 

6. The system as set forth in claim 4 wherein 
said transfer medium cooperates with a juxtaposed 
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section of a mailing envelope to create on the outside 
of said envelope a replica of the postage indicia 
printed on the document within said transfer section, 
said replica occurring by chemical reaction with 
5 material contained within said juxtaposed section of 
said envelope. 

?• The system as set forth in claim 4 and 
wherein said system function includes: 

means for calculating from a page count of each 
said document the amount of postage to print. 

8. The system as set forth in claim 4 and 
wherein said system further includes: 

means for calculating from address information 
contained within each said document the amount of 
5 postage to print. 

9. The system as set forth in claim 4 further 
including: 

means for determining if a document being printed 
is a draft document; and 
5 means for inhibiting said printing of postage 

indicia when a determination is made that the document 
being printed is a draft document. 

10. The system as set forth in claim 1 wherein 
said postage indicia is customized under control of 
data provided on an interactive basis between said 
processdLijg system and said user. 

11. An automated system for generating a 
document, said system comprising: 

means for interfacing with a user to generate 
selected documents; 
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means for determining the correct postage for 
mailing each said selected document; 

means for generating a personalized postage 
indicia for each said selected document; 
5 means for printing said selected document; and 

means for generating and printing said 
personalized postage indicia including said correct 
postage together with said printing of said selected 
document. 



12 . The system of claim 11 wherein said 
last-»mentioned means includes: 

means for selecting one of a plurality of 
graphical configurations of a postage indicia; and 
5 means for personalizing said selected graphical 

configuration. 

13. The system of claim 11 wherein said 
last-mentioned means includes: 

means for printing said personalized postage 
indicia including said correct postage on a label for 
5 subsequent application to a mailing envelope. 

14. The system of claim 11 further including: 
means for automatically generating an encrypted 

message incorporating information entered into said 
system by said user, said encrypted message printed 
5 together with said printing of said correct postage. 

15. -The system of claim 11 wherein said means for 
generating a personalized postage indicia includes 
graphical configurations of postage indicia. 



16. The system of claim 15 further including: 
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means for allowing a system to select one of said 
graphical configurations for the printing of said 
indicia. 

17 • A method for generating a document under 
control of a general purpose processor, said method 
comprising the steps of: 

interfacing with a user to generate a desired 
5 document ; 

determining the correct postage for mailing said 
document ; 

generating a personalized postage indicia for said 
document ; 

10 printing said document under control of said 

general purpose processor; and 

printing said personalized postage indicia 
including said correct postage together with said 
printing of said document under control of said general 

15 purpose processor. 

18. The method of claim 17 wherein said 
generating step further includes the step of: 

selecting one of a plurality of graphical 
configurations of a postage indicia. 

19. The method of claim 18 wherein said selecting 
step includes the step of: 

personalizing said selected graphical 
configuration • 

20. The method of claim 17 wherein said 
generating step further includes the step of: 

printing said personalized postage indicia 
including said correct postage on a label for 
5 subsequent transfer to a mailing envelope. 
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21. A processor-based system for printing a 
desired amount of postage for mailing a document 
created within said system, wherein the system is under 
the control of a set of instructions from a document 

5 generating program and a separate postage generating 
program, said system comprising: 

an interface program integrating said 
document generating program with said postage . 
generating program; 
10 means for temporarily coupling said 

integrated programs to a postage storage device; 

means for automatically calculating a correct 
amount of postage for a particular one of said 
documents as a function of mailing parameters entered 
15 into said system and specific to said particular 
document; 

means for formatting data to be sent to a 
printer coupled to said system, wherein said formatted 
data is operable to print said correct amount of 
20 postage; 

means for selectively creating a postage 
indicia together with said correct amount of postage; 
and 

means for printing said created postage and 
25 postage indicia on a transfer medium for subsequent 
transfer to a mailing envelope. 

22. The system of claim 21 wherein said postage 
indicia creating means includes: 

-means for receiving input instructing from a 
30 system user. 

23. The system set forth in claim 21 wherein said 
postage indicia creating means includes: 

means for selecting from a plurality of 
preestablished postage indicia. 
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24. The system set forth in claim 23 wherein at 
least one of said preestablished postage indicia is 
stored in said postage generating program. 

25. The system set forth in claim 24 further 
5 comprising: 

means controlled in part by a user for 
selectively modifying said at least one preestablished 
postage indicia in said postage generating program. 

26. The system set forth in claim 21 further 
10 including: 

means controlled by said document generating 
program for printing a document at least partially 
created under control of a system user • 

27. The system set forth in claim 25 further 
15 including: 

means for transferring said printed postage 
and indicia from said transfer media to a mailing 
envelope. 

28. The system set forth in claim 26 further 
20 including 

means for transferring said printed postage 
indicia from said transfer medium to a mailing 
envelope. 



29. An automated system for generating a 
25 personalized greeting card, said system comprising: 

means for interfacing with a user to generate 
selected customized cards; 

means for determining the correct postage for 
mailing each said selected card; 
30 means for generating a personalized postage 

indicia for each said selected card; 
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means for printing said customized card; and 
means for generating and printing said 

personalized postage indicia together with said correct 

postage. 

5 30. The system of claim 29 wherein said 

last-mentioned means includes: 

means for selecting one of a plurality of 
graphical configurations of a postage indicia; and 
means for personalizing said selected 
10 graphical configuration. 

31. The system of claim 29 wherein said 
last-mentioned means includes: 

means for printing said personalized postage 
indicia together with said correct postage on an 
15 envelope separate from said printed card. 

32. The system of claim 29 wherein said 
last-mentioned means includes: 

means for printing said personalized postage 
indicia together with said correct postage on a label 
20 for subsequent application to a mailing envelope. 

33. The system of claim 29 further including: 
means for automatically generating an 

encrypted message incorporating information entered 
into said system by said user, said encrypted message 
25 printed together with said printing of said correct 
postage . 

34. The system of claim 29 wherein said means for 
generating a personalized postage indicia includes 
graphical configurations of postage indicia. 

30 35. The system of claim 34 further including: 



wo 97/14117 



PCT/US96/16366 



46 



means for allowing a system to select one of 
said graphical configurations for the printing of said 
indicia. 

36. The system of claim 34 wherein said 
5 customized card generating means includes the creation 
of documents having particular themes; said system 
further including: 

means for automatically selecting based upon 
the theme of a document a particular one of said 
10 indicia • 
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"E-Stomp"- Post N Moil. Inc. 

Software instaliotion k screen prompts. 

1. Insert disk 1 in drive. 

2. Select Run...from File Menu in Progronrt Monoger 

3. Type b:\setup ond click O.K. (sul)stitute b for correct drive) 

4. Follow instructions on screen. 



Screen 1. 
203- 




Screen 5. 
211^ 



1. Connect TMU holder to your Seriol port. 2.1nsert TMU button in holder. 
3.Switch ON your printer, check poper. 
4.Prepore the following information: Full name and address of owner, 
EIN § (if orgonizotion). Social Security | (if individual) 
Zip code 5-»-4. telephone and Fox § 

Proceed 

i 



1. Legal terms, conditions ond Licensing ogrecment. 
2.AcceptGncc of obove by clicking Proceed, p^^^ggj 



I 




1. Display of 'E-STAMP'' serial | and TTylU seriol § (non-occessible) | 



2.Enter owner informotion 



I 



Proceed 



WARNING.: Verify above informotion. 
LAST CHANCE 



I 



Proceed 




LPleose ensure printer is ON LINE 
2.The above informotion wilt be printed in triplicole 
3.Sign ond moil two copies to Post N Moil, retain one copy 
registrotion cord will be moiled to you to occess TMU refilling stotions 

Proceed 



INSTALLATION PROCEEDING 
Now copying files... % completed 
Insert diskette §2 



Proceed 



INSTALUTION PROCEEDING 
Now copying files... % completed 
instaliotion completed 

FIG. 2 
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Post N MoiL Inc. _ Telephone (713)583-8909 Fox (713)699-0101 

505 Cypress Slotion Or. Suite § 505 
Houston. Tx 77030-1612 

"E-Slomp*™ - Rcgistrotion fornn 

-^^Mm.U. Button Seriol fOOOOOOOOl Dote: April 20. 199* 11 

^jy^E-Stomp Scriol fOOOOOOOOl Time: 01 :29 AM 

r Registered user: 

Individual Solim G. Koro Social Security § 636-18-0137 

Orgonizotion Globol Innpejc. Inc. Employer I.N. | 76-0422781 

Address: 505 Cypress Station Dr. 
Suite 1505 

City: Houston State: Tx Zipcode+4: 77090-1612 

Telephone: (713)583-8909 Fox: (713)699-0101 

Post N Moil License Agreement 

This is a legol agreement between you (an individuol or on entity), the end user, ond 
Post N Moil. Inc. If you do not agree to :he terms of this Agreement, oromptiy '-etur- 
the disk oockoge and accompanying items including all hardware, written materials crc 
' binders or other contoiners) to tne ploce ycu obtained them for o full refuna. 
License 

1. Gronl of License. 

2. Term of License. 

3. Copyright. 

4. Other restrictions. 

5. Limited worronty. 

6. Customer remedies. 

7. No Other Worronties. 

8. No Liability for Consequential Oomoges. 




FIG, 3 
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Level 1: Password. 
BaiNTON 

Level 2: Algorilhm 1. 

pi = (dl + d4 + d7 + dIO + dl3 + dl5) mod 256 
p2 = (d2 + d5 + d8 + d11 + d14 + dl7) mod 256 
p3 = (d3 + d6 + d9 + d12 + d15 + dl8) mod 256 
p4 = (dl9 + d22 + d25 + d28 + d31 + d34) mod 256 
p5 = (d20 + d23 + d26 + d29 + d32 + d35) mod 256 
p6 = (d21 + d24 + 27 + d30 + d33 + d36) mod 256 
p7 = (d37 + d38 + d39 + d40 + d41 + d42) mod 256 
p8 = (d43 + d44 + d45) mod 256 

iffisLl- Algorithm 2. 

pi = dl mod 256 
p2 = (d2 + d3) mod 256 
p3 = (d4 + d5 + d6) mod 256 
p4 = {d7 + d8 + d9 + dIO) mod 256 
p5 = (dll + dl2 + dl3 + dl4 + d15) mod 256 
p6 = {dl6 + d17 + d18 + d19 + d20 + d21) mod 256 
p7 = (d22 + d23 + d24 + d25 + d26 + d27 + d28) mod 256 
p8 = {d29 + d30 + d3l + d32 + d33 + d34 + d35 + d36 + d37 + d38 + d39 
+ d40 + d41 + d42 + d43 + d44 + d45) mod 256 



FIG. 6 
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FIG. 7A 
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ERROR: NOT A 

USPS BunoN 



> 



702 



1 



^ ERROR: NOT A 



POSTAGE BUnON 



> 



704 



READ AREA 1 PASSWORD 
THRU HASH ALGORITHM 



706 




DATA AREA 1 RETURN 
PST? 




YES 



c 



ERROR: 10 DOES 
NOT MATCH TYPE 



> 



708 



READ AREA 2 PASSWORD 
THRU HASH ALGORITHM 



709 



710 

"is 
held last 

^ACCESS DATE i 
TODAY? 

rYES 



c 



1 



ERROR: CORRUPTED 
BUTTON 



READ AREA 3 PASSWORD 
THRU HASH ALGORITHM 



712 



713 



715 



Is USER 
ZIP=E-STAMP 
INSTALLATION 

.ZIP?. 



NO 



c 



1 



ERROR: CORRUPTED 
BUnON 



714 



NO 



,YES 

a"1 TO FIG. 7B 



Q 



BUTTON CANNOT BE USED A 
OUTSIDE E-STAMP ZIP AREA 7^71 6 
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FIG. 7B 




ERROR: BUHON D0ES\^718 
VNOT CHECK WITH FiLEy 



/ERROR: BunON DOES V- 720 
VNOT CHECK WITH FILE^ 



ADD DATA AREA 3 FIELD STRIKE COUNTER UP + 
DATA AREA 2 FIELD STRIKE COUNTER DOWN 




721 



ADO DATA AREA 3 FIELD AMOUNT COUNTER UP •«■ 
DATA AREA 2 FIELD AMOUNT COUNTER DOWN 




c 



ERROR: CORRUPTED \ 
BUTTON 



111 



724 



c 



ERROR: CORRUPTED \ 
BUTTON 



726 



ERROR: BUTTON 0OES\ 
NOT CHECK WITH FIL|y ^ 730 



(ERROR: BUTTON EXPIRED)-^ 



732 



IS DATA AREA 2 
UPDATE FLAG 
=DATA AREA 3 ^ 
UPDATE FLAG? 



1 




YES 



r ERROR: BUTTON NOT \ 
V UPDATED CORRECTLY 734 



POSTAGE BUTTON 
VALIDATED 



735 
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